$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/f099e026-df52-3254-bcab-31b88ae1a306.roa File: f099e026-df52-3254-bcab-31b88ae1a306.roa (raw, json) Hash identifier: YcId8QE2ppp3jhlheA490/+5kfG7AIPKK00dW64XEMw= Subject key identifier: 82:3A:8E:1C:58:70:6B:9E:56:04:F8:CF:71:68:D3:11:4E:BC:B2:D9 Certificate issuer: /CN=0388001e-d087-4aad-9d6e-2a3bad1d2789 Certificate serial: 010D0C9F432858485A057FD324910D3137F96D80 Authority key identifier: 7A:6B:70:74:1D:96:50:15:36:60:7E:14:9C:57:5B:B0:46:81:B5:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/f099e026-df52-3254-bcab-31b88ae1a306.roa Signing time: Sat 28 Dec 2024 02:00:38 +0000 ROA not before: Sat 28 Dec 2024 02:00:38 +0000 ROA not after: Fri 28 Mar 2025 01:00:38 +0000 asID: 376 IP address blocks: 199.202.73.0/24 maxlen: 24 199.202.74.0/23 maxlen: 23 199.202.76.0/22 maxlen: 22 205.151.1.0/24 maxlen: 24 205.151.2.0/23 maxlen: 23 205.151.4.0/22 maxlen: 22 205.236.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/0388001e-d087-4aad-9d6e-2a3bad1d2789.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/0388001e-d087-4aad-9d6e-2a3bad1d2789.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5a:05:7f:d3:24:91:0d:31:37:f9:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388001e-d087-4aad-9d6e-2a3bad1d2789 Validity Not Before: Dec 28 02:00:38 2024 GMT Not After : Mar 28 01:00:38 2025 GMT Subject: CN=fb6624a7-eae1-4849-b520-d68c8e3bbf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:59:93:d5:bd:c1:c7:5f:be:02:39:57:8b: 59:9d:6c:89:1d:ce:0d:84:91:9d:4b:65:89:90:e6: da:26:39:f2:fd:f1:6a:34:1b:24:04:d2:92:9c:d6: e6:79:41:3b:bd:4d:2f:e8:3d:1b:9f:d0:a3:b3:0d: 88:14:35:9d:f8:63:e6:89:7f:2d:71:2c:b7:4a:66: 5f:10:d7:a5:43:52:ae:6c:51:c1:d6:26:05:3f:0b: 9a:93:94:2a:ab:08:22:f3:fc:12:41:43:ef:9b:24: c0:14:be:0a:96:cd:a5:9e:cb:4a:70:f4:ae:f2:d3: bd:9a:83:88:1b:a6:ba:08:f3:af:d8:15:0c:50:9e: 2c:0e:53:3a:61:55:c8:98:a9:b3:b1:db:b1:c8:18: bb:43:11:74:95:c5:fd:b9:45:66:06:7b:a2:c4:b5: 66:ee:1b:ef:f2:65:73:64:3b:26:7f:33:b4:c8:22: b8:e7:29:05:22:38:50:d3:e0:f3:85:33:f1:3c:ee: fe:a3:ad:6c:8c:ec:bd:73:9d:d8:fa:72:c9:2c:6a: ba:f1:0c:21:80:85:e6:46:f3:a2:bd:32:3f:1c:6f: 68:c0:5d:3c:fc:fe:56:38:52:fe:45:94:2f:ec:10: d9:23:c3:42:97:c7:a5:fe:4b:d8:06:a9:fd:98:65: 67:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3A:8E:1C:58:70:6B:9E:56:04:F8:CF:71:68:D3:11:4E:BC:B2:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/f099e026-df52-3254-bcab-31b88ae1a306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/0388001e-d087-4aad-9d6e-2a3bad1d2789.crl X509v3 Authority Key Identifier: keyid:7A:6B:70:74:1D:96:50:15:36:60:7E:14:9C:57:5B:B0:46:81:B5:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789.cer sbgp-ipAddrBlock: critical IPv4: 199.202.73.0-199.202.79.255 205.151.1.0-205.151.7.255 205.236.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0a:8a:fe:c3:7e:3e:db:61:7b:55:78:05:12:54:c3:e2:04: bf:73:c6:f5:56:ac:c4:55:fc:d7:c2:f8:ed:a3:4e:6b:53:41: bd:84:2c:90:5d:d8:6b:2e:dd:7e:85:c9:68:70:8e:63:c4:1a: 19:f0:c4:4a:2e:a3:48:22:eb:10:63:84:f2:91:44:69:15:51: 02:a9:26:90:e5:1d:f2:e8:ed:59:b6:a2:73:e7:6d:6d:df:ac: f2:2f:62:fb:5c:6b:3b:d8:28:12:10:8e:a1:d2:fe:ac:7d:3c: 11:72:eb:65:bf:99:dc:bf:e1:c2:fe:f3:38:10:61:a3:56:5e: 5a:5c:c3:e7:60:41:81:49:27:01:f0:54:38:64:8c:3c:08:21: 64:4e:b5:47:4d:25:59:14:1e:c9:39:f4:b5:77:5a:79:e4:97: 9b:0c:3f:90:68:2e:4f:63:8c:f9:62:0e:05:7f:91:d4:69:24: 82:ea:89:c5:67:c8:16:d6:7b:df:62:90:e5:0a:6e:9d:1a:14: 9b:13:fe:42:3c:cb:b6:64:bb:a9:48:34:9c:b0:6d:94:54:d3: 0b:d3:c3:53:1a:d1:7c:e2:1b:46:da:95:de:ba:35:ce:62:f4: 84:96:a2:cb:f6:67:ce:b6:f8:66:59:32:34:bc:8a:d3:d6:e2: 4f:00:90:88 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEhaBX/TJJENMTf5bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4ODAwMWUtZDA4Ny00YWFkLTlkNmUtMmEzYmFkMWQy Nzg5MB4XDTI0MTIyODAyMDAzOFoXDTI1MDMyODAxMDAzOFowLzEtMCsGA1UEAxMk ZmI2NjI0YTctZWFlMS00ODQ5LWI1MjAtZDY4YzhlM2JiZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFBZk9W9wcdfvgI5V4tZnWyJHc4NhJGdS2WJ kObaJjny/fFqNBskBNKSnNbmeUE7vU0v6D0bn9Cjsw2IFDWd+GPmiX8tcSy3SmZf ENelQ1KubFHB1iYFPwuak5Qqqwgi8/wSQUPvmyTAFL4Kls2lnstKcPSu8tO9moOI G6a6CPOv2BUMUJ4sDlM6YVXImKmzsduxyBi7QxF0lcX9uUVmBnuixLVm7hvv8mVz ZDsmfzO0yCK45ykFIjhQ0+DzhTPxPO7+o61sjOy9c53Y+nLJLGq68QwhgIXmRvOi vTI/HG9owF08/P5WOFL+RZQv7BDZI8NCl8el/kvYBqn9mGVnUQIDAQABo4IDcTCC A20wHQYDVR0OBBYEFII6jhxYcGueVgT4z3Fo0xFOvLLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMzg4 MDAxZS1kMDg3LTRhYWQtOWQ2ZS0yYTNiYWQxZDI3ODkvZjA5OWUwMjYtZGY1Mi0z MjU0LWJjYWItMzFiODhhZTFhMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDM4ODAwMWUtZDA4Ny00YWFkLTlk NmUtMmEzYmFkMWQyNzg5LzAzODgwMDFlLWQwODctNGFhZC05ZDZlLTJhM2JhZDFk Mjc4OS5jcmwwHwYDVR0jBBgwFoAUemtwdB2WUBU2YH4UnFdbsEaBtWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wMzg4MDAxZS1kMDg3LTRhYWQtOWQ2ZS0yYTNi YWQxZDI3ODkuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBADHykkD BATHykAwDAMEAM2XAQMEA82XAAMEAc3sLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgCor+w34+22F7VXgF ElTD4gS/c8b1VqzEVfzXwvjto05rU0G9hCyQXdhrLt1+hclocI5jxBoZ8MRKLqNI IusQY4TykURpFVECqSaQ5R3y6O1ZtqJz521t36zyL2L7XGs72CgSEI6h0v6sfTwR cutlv5ncv+HC/vM4EGGjVl5aXMPnYEGBSScB8FQ4ZIw8CCFkTrVHTSVZFB7JOfS1 d1p55JebDD+QaC5PY4z5Yg4Ff5HUaSSC6onFZ8gW1nvfYpDlCm6dGhSbE/5CPMu2 ZLupSDScsG2UVNML08NTGtF84htG2pXeujXOYvSElqLL9mfOtvhmWTI0vIrT1uJP AJCI -----END CERTIFICATE-----Generated at Fri Mar 14 10:46:02 2025 by rpki-client